samba4 sysvol permissions?

Matthieu Patou mat at
Tue Sep 27 02:38:28 MDT 2011

On 26/09/2011 15:06, Jeff Sadowski wrote:
> On Thu, Sep 22, 2011 at 8:30 PM, Matthieu Patou<mat at>  wrote:
>> Hi Jeff,
>> On 22/09/2011 15:14, Jeff Sadowski wrote:
>>> In windows there are two places for permissions. The share permissions
>>> and the permissions of the directory itself. I was looking at the
>>> documentation but didn't see anything in samba4 docs except about
>>> setting the user_xattr flag which I did. Do I use xattr properties
>>> against "windows domain" groups and users? on each directory?
>> I'm not sure I got you right.
> Looks like you got a good portion of it
> Below should be equivalent to the security tab. What about the sharing
> tab's permissions
> where you select users and Full, change, read permissions
> how do you select that ..... is this implemented yet? .... It should
> be something that you put in the smb.conf file but the only thing I
> see by default there is the readonly =[yes|no] option.
Didn't understand the question, can you reask it another way ?

>> In Samba4 (and samba 3.x with the xattr_acl module) we store NT acls as
>> extended attributes (security.ntacls). You can dump it with getfattr -d -m
>> ""<myfile>.
>> The best way to set ACLs for the moment is to do them in windows.
> this works under sysvol to a point I can't match the special
> permissions under CREATOR OWNER user
> not sure how that is fully set on my windows machine.
Can you be more clearer ? screenshot can help.


Matthieu Patou
Samba Team

More information about the samba-technical mailing list